Physical access / device lock down
Connecting physical media to a computer bears a great risk of e.g. virus infection. Disabling physical connections also prevents unauthorized persons from installing any software on the system.
If a computer is placed outside a locked system cabinet all physical interface units giving access to file transfer, e.g. USB, serial and parallel ports, floppy and CD drives, should be disabled.
Setting the PC BIOS/UEFI to enable Chassis Intrusion Detection will generate a log entry that the PC-chassis has been opened.